Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Attackers compromised the registries for three country-code top-level domains, allowing them to obtain unauthorized HTTPS certificates for several Google domains. The affected domains are those ending in .gh, .sl, and .as, which correspond to Ghana, Sierra Leone, and American Samoa, respectively. Google's internal systems were not breached in the attack. The unauthorized certificates could be used by attackers to impersonate legitimate sites over encrypted connections. This poses a risk to any domain using these top-level domains, rather than Google's own systems. The compromise was reported by Google on October 6.